Mass PII Finder — JS Recon Console

1 Target

Target URL

Max JS files

Timeout (s)

Min confidence

Rate limit (req/s)

Probe live endpoints Passive subdomain discovery (CT logs) Restrict to exact host only Ignore robots.txt

Extra in-scope domains (optional)

One per line — exact, "sub.example.com", or wildcard "*.example.com"

I own this target or am explicitly authorized to test it (bug bounty scope / client engagement).

Pipeline

discover JS files
extract secrets / tokens / endpoints
validate findings
triage report

2 Live log

$ waiting for target...

3 Findings

Run a scan to pull JS files, mine them for keys/tokens/endpoints, and triage the results here.

	Severity	Type	Confidence	Value	Found in

Scan history

No scans yet. Run one from the Scan tab — every completed scan is saved here for later review, export, and diffing.

Diff two scans

Pick a baseline and a later scan of the same target to see which findings are new, resolved, or persisting since last time — useful for re-checks after a fix, or periodic monitoring.

Baseline (older)

Compare against (newer)